CVE-2020-9054

🗓️ 04 Mar 2020 19:30:18Reported by certccType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 1245 Views

ZyXEL NAS devices firmware version 5.21 pre-auth command injection vuln

Reporter	Title	Published	Views	Family All 29
GithubExploit	Exploit for CVE-2014-8361	31 Mar 202611:18	–	githubexploit
ATTACKERKB	VU#498544 ZyXEL pre-authentication command injection in weblogin.cgi	26 Feb 202000:00	–	attackerkb
ATTACKERKB	CVE-2020-9054	20 Feb 202000:00	–	attackerkb
Circl	CVE-2020-9054	26 Feb 202010:20	–	circl
CISA KEV Catalog	Zyxel Multiple NAS Devices OS Command Injection Vulnerability	25 Mar 202200:00	–	cisa_kev
Check Point Advisories	ZyXEL NAS Command Injection (CVE-2020-9054)	26 Feb 202000:00	–	checkpoint_advisories
Cvelist	CVE-2020-9054 ZyXEL NAS products running firmware version 5.21 and earlier are vulnerable to pre-authentication command injection in weblogin.cgi	4 Mar 202019:30	–	cvelist
Krebs on Security	Zyxel Fixes 0day in Network Storage Devices	24 Feb 202017:13	–	krebs
Krebs on Security	Zyxel Flaw Powers New Mirai IoT Botnet Strain	20 Mar 202014:46	–	krebs
Nuclei	Zyxel NAS Firmware 5.21- Remote Code Execution	28 May 202605:39	–	nuclei

NVD

Node

zyxel nas326_firmwareRange<5.21(aazf.7)c0

AND

zyxel nas326Match-

Node

zyxel nas520_firmwareRange<5.21(aasz.3)c0

AND

zyxel nas520Match-

Node

zyxel nas540_firmwareRange<5.21(aatb.4)c0

AND

zyxel nas540Match-

Node

zyxel nas542_firmwareRange<5.21(abag.4)c0

AND

zyxel nas542Match-

Node

zyxel atp100_firmwareRange4.35–4.35(abps.3)c0

AND

zyxel atp100Match-

Node

zyxel atp200_firmwareRange4.35–4.35(abfw.3)c0

AND

zyxel atp200Match-

Node

zyxel atp500_firmwareRange4.35–4.35(abfu.3)c0

AND

zyxel atp500Match-

Node

zyxel atp800_firmwareRange4.35–4.35(abiq.3)c0

AND

zyxel atp800Match-

Node

zyxel usg20-vpn_firmwareRange4.35–4.35(abaq.3)c0

AND

zyxel usg20-vpnMatch-

Node

zyxel usg20w-vpn_firmwareRange4.35–4.35(abar.3)c0

AND

zyxel usg20w-vpnMatch-

Node

zyxel usg40_firmwareRange4.35–4.35(aala.3)c0

AND

zyxel usg40Match-

Node

zyxel usg40w_firmwareRange4.35–4.35(aalb.3)c0

AND

zyxel usg40wMatch-

Node

zyxel usg60_firmwareRange4.35–4.35(aaky.3)c0

AND

zyxel usg60Match-

Node

zyxel usg60w_firmwareRange4.35–4.35(aakz.3)c0

AND

zyxel usg60wMatch-

Node

zyxel usg110_firmwareRange4.35–4.35(aaph.3)c0

AND

zyxel usg110Match-

Node

zyxel usg210_firmwareRange4.35–4.35(aapi.3)c0

AND

zyxel usg210Match-

Node

zyxel usg310_firmwareRange4.35–4.35(aapj.3)c0

AND

zyxel usg310Match-

Node

zyxel usg1100_firmwareRange4.35–4.35(aapk.3)c0

AND

zyxel usg1100Match-

Node

zyxel usg1900_firmwareRange4.35–4.35(aapl.3)c0

AND

zyxel usg1900Match-

Node

zyxel usg2200_firmwareRange4.35–4.35(abae.3)c0

AND

zyxel usg2200Match-

Node

zyxel vpn50_firmwareRange4.35–4.35(abhl.3)c0

AND

zyxel vpn50Match-

Node

zyxel vpn100_firmwareRange4.35–4.35(abfv.3)c0

AND

zyxel vpn100Match-

Node

zyxel vpn300_firmwareRange4.35–4.35(abfc.3)c0

AND

zyxel vpn300Match-

Node

zyxel vpn1000_firmwareRange4.35–4.35(abip.3)c0

AND

zyxel vpn1000Match-

Node

zyxel zywall110_firmwareRange4.35–4.35(aaaa.3)c0

AND

zyxel zywall110Match-

Node

zyxel zywall310_firmwareRange4.35–4.35(aaab.3)c0

AND

zyxel zywall310Match-

Node

zyxel zywall1100_firmwareRange4.35–4.35(aaac.3)c0

AND

zyxel zywall1100Match-

[
  {
    "product": "NAS326",
    "vendor": "ZyXEL",
    "versions": [
      {
        "lessThanOrEqual": "V5.21(AAZF.7)C0",
        "status": "affected",
        "version": "V5.21(AAZF.7)C0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "NAS520",
    "vendor": "ZyXEL",
    "versions": [
      {
        "lessThanOrEqual": "V5.21(AASZ.3)C0",
        "status": "affected",
        "version": "V5.21(AASZ.3)C0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "NAS540",
    "vendor": "ZyXEL",
    "versions": [
      {
        "lessThanOrEqual": "V5.21(AATB.4)C0",
        "status": "affected",
        "version": "V5.21(AATB.4)C0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "NAS542",
    "vendor": "ZyXEL",
    "versions": [
      {
        "lessThanOrEqual": "V5.21(ABAG.4)C0",
        "status": "affected",
        "version": "V5.21(ABAG.4)C0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "NSA210",
    "vendor": "ZyXEL",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "NSA220",
    "vendor": "ZyXEL",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "NSA220+",
    "vendor": "ZyXEL",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "NSA221",
    "vendor": "ZyXEL",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "NSA310",
    "vendor": "ZyXEL",
    "versions": [
      {
        "lessThanOrEqual": "V4.75(AALH.2)C0",
        "status": "affected",
        "version": "V4.75(AALH.2)C0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "NSA320",
    "vendor": "ZyXEL",
    "versions": [
      {
        "status": "affected",
        "version": "all"
      }
    ]
  },
  {
    "product": "NSA320S",
    "vendor": "ZyXEL",
    "versions": [
      {
        "lessThanOrEqual": "V4.75(AANV.2)C0",
        "status": "affected",
        "version": "V4.75(AANV.2)C0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "NSA325",
    "vendor": "ZyXEL",
    "versions": [
      {
        "lessThanOrEqual": "V4.81(AAAJ.1)C0",
        "status": "affected",
        "version": "V4.81(AAAJ.1)C0",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "NSA325v2",
    "vendor": "ZyXEL",
    "versions": [
      {
        "lessThanOrEqual": "V4.81(AALS.1)C0",
        "status": "affected",
        "version": "V4.81(AALS.1)C0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
krebsonsecurity	www.krebsonsecurity.com/2020/02/zyxel-fixes-0day-in-network-storage-devices/
kb	www.kb.cert.org/vuls/id/498544/
kb	www.kb.cert.org/artifacts/cve-2020-9054.html
zyxel	www.zyxel.com/support/remote-code-execution-vulnerability-of-NAS-products.shtml
cwe	www.cwe.mitre.org/data/definitions/78.html
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

10 Nov 2025 14:37Current

10High risk

Vulners AI Score10

CVSS 3.19.8

CVSS 210

EPSS0.94265

SSVC